Virtualized Network Functions security attacks and vulnerabilities

Aljuhani, Ahamed; Alharbi, Talal

doi:10.1109/ccwc.2017.7868478

Cited by 30 publications

(21 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The second issue came from the resource sharing for a physical machine. If a virtual machine is attacked, the attacker may attack another virtual machine on the same host and also attacks the physical machine [3,11]. Some virtual servers may have low-security protection.…”

Section: Increasing Of Internet Users Not Only Brings Innovationmentioning

confidence: 99%

“…Users do not want to share resources with other users that have low-security protection [12]. The third security issue in virtualization is that some attacks such as DoS attack may disable a link between two physical machines [3,10,11]. Hence, the security management of the virtualized server is important.…”

Section: Increasing Of Internet Users Not Only Brings Innovationmentioning

confidence: 99%

“…In this section, we evaluate the performance of the proposed method in substrate networks shown in Figures 3 and 4. For both topologies, the security level V( ) and demand ( ) for each substrate node are selected at random among [1,3], respectively. Moreover, CPU of is set at random among [80,95].…”

Section: Performance Evaluationmentioning

confidence: 99%

“…Moreover, CPU of is set at random among [80,95]. On the other hand, the security level V( ) for each substrate link is also selected at random among [1,3]. Here, we assume that the addition of a security VNF increases the security level of the substrate node by 1.…”

Section: Performance Evaluationmentioning

confidence: 99%

“…In general, software for a specific function is implemented in each device. With such implemented software, each device provides the specific function [2,3]. Therefore, a larger number of devices are required when a larger number of services have to be provided on the Internet.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Virtual Network Embedding Based on Security Level with VNF Placement

Dwiardhika

Tachibana

2019

Security and Communication Networks

View full text Add to dashboard Cite

In this paper, in order to embed virtual networks by considering network security, we propose a virtual network embedding based on security level with VNF placement. In this method, virtual networks are embedded in a substrate network by considering security and some security VNFs are placed in order to increase the security level of substrate networks. By using our proposed method, many virtual networks can be embedded by considering security level. As a result, the reward can be increased and the cost of placing VNFs is not increased so much. We evaluate the performance of our proposed method with simulation. The performance of this method is compared with the performance of a method that places VNFs randomly and the performance of a method without placing VNFs. From numerical examples, we investigate the effectiveness of this method. In numerical examples, we show that the proposed method is effective in embedding virtual networks by considering network security.

show abstract

Section: Increasing Of Internet Users Not Only Brings Innovationmentioning

confidence: 99%

Section: Increasing Of Internet Users Not Only Brings Innovationmentioning

confidence: 99%

Section: Performance Evaluationmentioning

confidence: 99%

Section: Performance Evaluationmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Virtual Network Embedding Based on Security Level with VNF Placement

Dwiardhika

Tachibana

2019

Security and Communication Networks

View full text Add to dashboard Cite

show abstract

Distributed denial‐of‐service attack mitigation in network functions virtualization‐based 5G networks using management and orchestration

Köksal

Dalveren

Maiga

et al. 2021

Int J Communication

View full text Add to dashboard Cite

Summary The fifth generation (5G) technology is expected to allow connectivity to billions of devices, known as Internet of Things (IoT). However, IoT devices will inevitably be the main target of various cyberattack types. The most common one is known as distributed denial‐of‐service (DDoS) attack. In order to mitigate such attacks, network functions virtualization (NFV) has a great potential to provide the benefit of elasticity and low‐cost solutions for protecting 5G networks. In this context, this study proposes a new mechanism developed to mitigate DDoS attacks in 5G NFV networks. The proposed mechanism utilizes intrusion prevention system's (IPS) virtual machines (VMs) to intercept the queries. Based on the volume of DDoS traffic, IPS's VMs are dynamically deployed by means of management and orchestration (MANO) in order to balance the load. To evaluate the effectiveness of the mechanism, experiments are conducted in a real 5G NFV environment built by using 5G NFV environment tools. To our best knowledge, this is the first time that NFV‐based mechanism is experimentally tested in a real 5G NFV environment for mitigating DDoS attacks in 5G networks. The experimental results verify that the proposed mechanism can mitigate DDoS attacks effectively.

show abstract